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In the Claims ; 

Please amend claims 39-57, 60 and 63 as indicated below. 

1 . (Previously presented) A network management system, comprising: 

a gateway which is coupled to a plurality of managed objects and which is 
configured to deliver events generated by the managed objects to one or 
more managers or to deliver requests generated by the managers to one or 
more ofthc managed objects; and 

a platrorm-indcpcndcnt interface to the gateway, wherein the gateway is 
configurable to communicate with the managers ihrougli the platform- 
independent interface lo deliver the events or requests; 

wherein the gateway is configurable to provide object-level access control 
between the managers and the managed objects to receive the events from 
or to send the requests to the managed objects, wherein said object-level 
access control is provided at the individual object level so that one of the 
managers is granted access to one of the managed objects while being 
prevented from interfacing widi a different one ofthc managed objects, 

2. (Original) The network management system of claim 1, wherein the gateway 
is configurable to determine whether each of the managers is authorized to communicate 
with each of the managed objects. 

3. (Original) The network management system of claim 1, whurcin the gateway 
is configurable to authenticate the managers to receive the events from or to send the 
requests to the managed objects as a function ofthc identity ofthc managed object. 

4. (Original) The network management system of claim 1, wherein the gateway 
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is confieurable Lo authenticate Ihc managers to receive the events or send the requests as 
a function ofuscr li^s entered by users of the managers. 

5. (Original) The network management system of claim 1, wherein the events or 
requests arc delivered by the gateway through the platfonn-iudepcndcnt interface 
according to Internet hiter-Object Protocol (HOP). 

6. (Original) The network management system of claim 1, wherein Uie platform- 
independent interface to the gateway is expressed in an interface definilion language, and 
wherein Ihe interface definition language comprises a language for defining interfaces lo 
the managed objects across a plurality of platforms and across aplurality of programming 
languages. 

7. (Original) The network management system of claim 6, wherein the interface 
definition language comprises OMG IDL. 

8. (Original) The network management system of claim 1 , wherein tlie managed 
objects comj^risc one or more objects corresponding to a telephone network. 

9. (Original) The network management system of claim 1, wherein the majiagcd 
objects comprise an object corresponding to a telecommunications device, 

10. (Original) The network management system of claim 1 , wherein the gateway 
is configurable to provide security audit trails, 

11. (Previously presented) The network management system of claim 10, 
wherein the gateway providing security audit trails comprises the gateway providing 
access to a logging service. 

12. (Previously presented) The network managejnent system of claim U, 
wherein the logging service is operable to log an ID of a user that receives each event or 
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sends each request. 

13. (T'levioLisly presenled) Tlic netwoiic manaficnicnt system of claim 11, 
wheicin Ihc logging service is operable to log an ID of ihc managed object that is the 
<wurcc of each event or the target of each request. 

14. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log a time at which each event or request is 
generated , 

15. (Previously presented) The network management system of claim 11, 
wherein the logging sci-vicc is operable to log a time at which each event or request is 
delivered. 

16. (Original) The network management system of claim 1 , wherein the requests 
comprise a query for infomiation concerning one of the managed objects. 

17. (Original) The network management system of claim 1, wherein the requests 
comprise a command to set one or more parameters of one of the managed objects, 

18. (Original) The network management system of claim 1, wherein the requests 
arc converted from the interface definition language to a Portable Management Interface 
(PM[) format prior to delivery to the managed objects. 

19. (Original) The network management system of claim 1 , wherein the requests 
are converted from the interface definition language to a platform-specific format prior to 
delivery to the managed objects. 

20. (Previously presented) A network management method, comprising: 
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sending an identity of a user of a manager application to a gateway, Nvhcrcin the 
gateway is configurable to communicate with t>ic manager application 
through a platform-independent interface; 

determining on a managed object Icivcl whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of maj^agcd 
objects; and 

delivering the event to tlic manager application or the request to the managed 
object if the manager access is approved. 

21. (Original) Tlio network management method of claim 20, wherein the 
gateway is configurable to determine whether the manager is authorized to communicate 
with Ihc managed object. 

22. (Original) The network management method of claim 20, wherein the 
gateway is configurable to authenticate the manager to receive the event or send the 
request as a function as the identity of the managed object generating the event or 
receiving the request. 

23. (Original) The. network management method of claim 20, wherein the 
gateway is configurable to authenticate the manager to receive the event or send the 
request as a function of a user ID entered by tlie user of the manager. 
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24. (Original) The network management method of claitn 20, wherein the event 
or request is ilcliveied by the gateway through the platform-independent interface 
according to Internet Inter-Object Protocol (ITOP). 

25. (Original) The network management method of claim 20, wherein the 
plalfornvindepcridcnt interface to the gateway is expressed in an interface definition 
language, and wherein the interface definition language comprises a language for 
defining interfaces to the managed objects across a plurality of platforms and across a 
plurality of progriunming languages. 

26. (Original) The network management method of claim 25, wherein the 
interface definition language comprises OMG IDL. 

27. (Original) The network management method of claim 20, wherein the 
managed object comprises an object corresponding to a telephone network. 

28. (Original) The network management method of claim 20, wherein the 
managed object comprises an object corresponding to a telecommunications device. 

29. (Original) The nctworic management tncthod of claim 20, wherein the 
gateway is configurable to provide security audit trails. 

30. (Original) The network management method of claun 29, wherein the 
g;ileway providing security audit trails comprises the gateway providing access to a 
logging service, 

31. (Original) The network management method of claim 30, wherein the 
logging service is operable to log an ID of a user that receives the event or sends the 
request. 

32. (Original) The network managanent method of claim 30, wherein the 
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logging service is operable to log an ID of Ihc managed object Uiat is tlie source of the 
event or the target of the request. 

33. (Original) The network managemcjU niethod of claim 30, wherein Ihe 
logging service is operable to log a time at which the event or request is generated. 

34. (Original) The network management method of claim 30, wherein the 
logging sci-vioe is operable to log a time at which the event or request is delivered. 

35. (Original) The network management method of claim 20, wherein the 
request comprises a query for information concerning the managed object. 

36. (Original) The network management melhod of claim 20, wherein the 
request comprises a command to set one or more parameters of tlie managed object, 

37. (Original) The network management method of claim 20, wherein the 
request is converted from the interface definition language to a Portable Management 
Interface (PMl) fonnat prior to delivery to the managed object. 

38. (Original) The network management method of claim 20, wherein the 
request is converted from the interface definition language to a platform-specific fomiai 
prior to delivery to the managed object 

39. (Currently amended) A earmr-tangi ble, computer accessible medium 
comprising computer program instnictions for network management, wherein the 
program instnictions are computer-executable to perform: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 
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dclcmiining on a managed object level whether or not the manager apph'cation is 
allowed to receive an event generated by one of a phtraUty of managed 
objects or to scad a request to the one of live phirality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager apphcation to receive the evcjit or send 
the request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that tlie manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager applicalion or tho request to the inanaged 
object if the m;inager access is approved. 

40. (Cum^ntly amended) The ^^triet ^tangiblo. computer accessible medium of 
claim 39, wherein the gateway is configurable to determine whether the manager is 
uuihorizcd to communicate with the managed object- 

4L (Currently amended) The eam ^tangible. computer accessible medium of 
claim S9; wherein the gateway is configurable to authenticate the manager to receive tlie 
event or send the request as a function as the identity of the managed object generating 
the event or receiving the request. 

42, (Cun-ently amended) The eamep -tanaible, computer accessible medium of 
claim 39, wherein the gateway is configurable to authenticate the manager to receive Uic 
event or send the request as a function of a user ID entered by the user of the manager. 

43, (Currently amended) The «>fvi^<4^tangiblc. computer accessible medium of 
claim 39, wherein tlic event or request is delivered by the gateway through the platform- 
independent interface according to Internet Inter-Object Protocol (HOP). 
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44. (Currently amended) Tlic ^^ay^-tangihlc. compuLer accessible medium of 
claim 2% wherein the platform-independent interface to the gateway is expressed in an 
interface definilion language, and wherein the interface definition language comprises a 
language for defining interfaces to the managed objects across a plurality of platfoims 
and across a plurality of programming languages, 

45. (CuiTcntly amended) The eamer-tang ible. com puter accessible medium of 
cinim 44, wherein the interface definition language comprises OMG IDL. 

46. (Currently amended) The eftrrier-^ tan^iblc. computer acces sible medium of 
cl;nm 39, wherein the managed object comprises an object corresponding to a telephone 
network. 

47. (Currently amended) The i^Am-iftr-tfi^gible, computer accessible medium of 
claim 39, wherein the managed object comprises an object corresponding to a 
telecommunications device. 

48. (Currently amended) The eafrie^tangiblc . compute r accessible medium of 
claim 39, wherein the gateway is configurable to provide security audit trails, 

49. (Currently amended) llie 6aFrie< ^tangihle> computer acces sible medium of 
claim 4S, wherein the gateway providing security audit trails comprises the gateway 
providing access to a logging service. 

50. (Currently amended) The eftft4e< ptangihlc. comnutcr accessible medium of 
claim 49, wherein the logging service is operable to log an ID of a user that receives the 
event or sends the request. 

51. (Currently amended) The eanief- tangible, com nuter accessible medium of 
claim 49, wherein the logging service is operable to log an ID of the managed object that 
is the source of the event or the target of the request. 
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52. (Currently amended) The ^mrri^i^r^WI^^^ cnmputcr accessible medium of 
clnim 49, wherein the logging service is operable to log a time at which the event or 
request is generated. 

53. (Currently amended) The BaFR^tanfr iblc- computer accessible medium of 
claim 49, wherein the logging service is operable lo log a time at which the event or 
request is delivered, 

54. (Currently amendcd> Tlie ^ftrrier -tangible, computer accessibl e medium of 
claim 39, wherein the request comprises a query for information concerning tlic managed 
object. 

55. (Currently amended) The eam^langiblQ. c omputer acc essible medium of 
claim 39, wherein the request comprises a command to set one or more paramelcrs of the 
n^anaged object. 

56. (Currently amended) The eamer-tajj giblc. computer accessible medium of 
claim 39, wherein the request is converted from the interface definition language to a 
PorLahIc Management Interface (PMI) format prior to delivery lo the managed object. 

57. (Currently amended) The cftmer-ta nGible. computer accessible medium of 
cloim 39, wherein the request is converted from the interface definition language to a 
plarform-speeinc foanat prior to delivery to the managed object. 

58. (Previously presented) A network management system, comprising: 

a gateway which is coupled to a plurality of managed objects and which is 
configured to deliver events generated by the mai\agcd objects to one or 
more managers or to deliver requests generated by the managers to one or 
more of the managed objects; and 
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a platfonn-indcpendent interface to ilie gateway, wherein tlic gateway is 
configurable to commuTiicatc with the nianagcrs through the platform- 
independent interface to deliver the events or requests; 

wherein llie gateway is configurable to provide object-level access control 
between the managers and the managed objects to receive the events froo) 
or to send the requests to the managed objects, wherein said object-level 
access control is provided at the individual object level so that one of the 
managers is granted access to one of the managed objects while being 
prevented from interfacing with a different one of the managed objects, 
and wherein the managers use a request Service Access Point (SAP) for 
requests and responses, 

59. (Previously presented) A network majiagement method, comprising: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platfomi-indcpendent interface; 

dctcmiining on a managed object level whether or not the manager appKcation is 
allowed to receive an event generated by one of a plurahty of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the xiser of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granled access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 
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delivering the event to Ihc manager application or tlie request to the managed 
object if the manager access is approved; 

wherein the manager application uses a request Service Access Point (SAP) for 
requests and responses. 

60. (Currently amended) A ^frie^ -tangiblo. com puter accc s_sible medium, 
comprising computer program inslmctions for network management, wherein the 
program instructions arc computer-executable to pcrfoi*m: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 

dctcmiining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager £^>plication, 
whereby access for the manager application to receive tine event or send 
tlic request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one ofthc plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object If the manager access is approved; 

wherein the manager application uses a request Service Access Point (SAP) for 
requests and responses. 
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61. (Previously presented) A network management system, comprising: 

a gateway which is coupled to a plurality of managed objects and which is 
configured to deliver events generated by the managed objects to one or 
more managers or to deliver requests generated by the managers to one or 
more of the managed objects; 

a platform-independent interface to the gateway, wherein the gateway is 
configurable to communicate with the managers tlirough the platform- 
indcpcadcnt interface to deliver the events or requests; 

wherein the gateway is configurable to provide object-level access control 
between the managers and the managed objects to receive the events from 
or to send the requests to the managed objects, wherein said object-level 
access control is provided at the individual object level so that one of the 
managers, is granted access to one of the managed objects while being 
prevented from interfixcing with a different one of the managed objects; 
and 

wherein the gateway uses a singleton SAP object that shares all ProxyAgcnts 
through which a manager deals wilh a managed object and allows the 
insertion of the user name in the request message to enforce object-level 
access control. 

62. (Previously presented) A network management method, comprising: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
througli a platform-independent interface; 
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dciemuaing on a managed object level whether or not the manager application is 
allowed to receive an'event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application; 

whereby access for the manager application to receive the event or send tlie 
request is approved or denied for said one of the plurality of managed 
objects at the individual object level so tliat the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a di ffcrcnt one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the m^magcd 
object if the manager access is approved; and 

wherein the gateway uses a singleton SAP object that shares all ProxyAgcnts 
through which the manager deals with a managed object and allows the 
insertion of the user name in llie request message to enforce objcct-Icvel 
access control. 

63. (Currently amended) A eameF-tang iblo, computer accessible medium, 
comprising com puter p rogram instructions for network management, wherein the 
program instructions are computer-executable to perform: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
tlirough a platform-independent interface; 

determining on a managed object level whetlicr or not the manager application is 
allowed to receive an event generated by one of a phunlity of managed 
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objects or to send a request to ihc one of the plurality of managed objects 
as a function of the identity of the user of the manager application; 

whereby access for Ihc manager application to receive the event or send the 
request i$ approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granted access to one of the pUirality of managed objects while being 
prevented from interfacing with a diffei'cnl one of the plurality of managed 
objects; and 

delivering the event to tlie manager application or the request to the managed 
object if the manager access is approved; and 

wherein the gateway uses a singleton SAP object that shares all ProxyAgents 
through which the manager deals with a managed object and allows the 
insertion of the user name in the request message to enforce object-level 
access control. 
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